Extracted

• • Target

    new order C00382023.exe

  • Size

    829KB

  • MD5

    4c53bd8b0d0258ec46214b60aa9ffe44

  • SHA1

    f92ad8131bc8772efb25dec5c6536fc7f1b887b2

  • SHA256

    2b22ea34acf3633912daa0e5d5c5e3cd3b01bac899f1fd7349383f6922aa4284

  • SHA512

    20fdf8f2111b319303302c955e682bc223ca671ed8b366ea2cfd649e39694dd598be6fc294e5755389313430c49119527d38d5682b2579cc6a04d09961fd4b2e

  • SSDEEP

    12288:YOpYEuPUpE4U1JyqAj1kEJEB6+5BInzQ23sOpGAIwQONQd6:YsYXUpE4UOy8O6+5BIM2cOwYQa

  Score

  10^/10

  formbookot8sratspywarestealertrojan

  • Formbook

    Formbook is a data stealing malware which is capable of stealing data.

    trojanspywarestealerformbook

  • Formbook payload

    rat

  • Deletes itself

  • Suspicious use of SetThreadContext

  behavioral1behavioral2